# 戎行专用：OpenVPN 客户端 + Dante SOCKS5（仅内网代理）
FROM alpine:3.19

# 与业务镜像一致，使用国内 apk 源
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
    && apk add --no-cache \
        openvpn \
        bash \
        iproute2 \
        dante-server \
        curl

COPY entrypoint.sh /entrypoint.sh
COPY sockd.conf.template /etc/sockd.conf.template
RUN chmod +x /entrypoint.sh

ENV VPN_DIR=/vpn \
    SOCKS_HOST=0.0.0.0 \
    SOCKS_PORT=1080 \
    RONGXING_HOST=192.168.3.43

VOLUME ["/vpn"]
EXPOSE 1080

HEALTHCHECK --interval=30s --timeout=5s --start-period=45s --retries=5 \
  CMD ip link show tun0 >/dev/null 2>&1 || exit 1

ENTRYPOINT ["/entrypoint.sh"]